terse-self-host
Pass
Audited by Gen Agent Trust Hub on Jul 6, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill uses
npx create-terseto download and execute the platform bootstrap script directly from the NPM registry. It also performs a global installation of theterse-clipackage. - [COMMAND_EXECUTION]: The installation process involves executing several shell commands, including Docker Compose operations (
docker compose pull,docker compose up -d) and prerequisite checks for Node.js and Docker versions. - [COMMAND_EXECUTION]: The bootstrap script automatically modifies shell configuration files (
~/.zshrcor~/.bashrc) to add export blocks for the Terse CLI target configuration, which acts as a persistence mechanism for environment variables. - [EXTERNAL_DOWNLOADS]: The skill downloads approximately 500MB of container images from a Google Artifact Registry repository (
us-central1-docker.pkg.dev/fluid-analogy-473415-c2/public/terse:latest) to run the backend and frontend components.
Audit Metadata